You should test your sites with these two tools: http://www.shellshocktest.com/ http://www.shellshocktest.com/ and http://shellshock.brandonpotter.com/ http:

You should test your sites with these two tools: http://www.shellshocktest.com/ http://www.shellshocktest.com/ and http://shellshock.brandonpotter.com/ http://shellshock.brandonpotter.com/ There is a well maintained guide at Digital Ocean that explains the nitty gritty details: https://www.digitalocean.com/community/tutorials/how-to-protect-your-server-against-the-shellshock-bash-vulnerability https://www.digitalocean.com/community/tutorials/how-to-prot... If a server is vulnerable there is a great guide that helps you to deal even with old systems: https://dmsimard.com/2014/09/25/the-bash-cve-2014-6271-shellshock-vulnerability/ https://dmsimard.com/2014/09/25/the-bash-cve-2014-6271-shell...